Analysis
-
max time kernel
117s -
max time network
118s -
platform
windows7_x64 -
resource
win7-20231129-en -
resource tags
arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system -
submitted
08/04/2024, 20:58
Behavioral task
behavioral1
Sample
e8679b63d4e3e327c49ed4b0ff43fb7f_JaffaCakes118.pdf
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
e8679b63d4e3e327c49ed4b0ff43fb7f_JaffaCakes118.pdf
Resource
win10v2004-20240226-en
General
-
Target
e8679b63d4e3e327c49ed4b0ff43fb7f_JaffaCakes118.pdf
-
Size
93KB
-
MD5
e8679b63d4e3e327c49ed4b0ff43fb7f
-
SHA1
c9042c83743ef1983fe07b5da6af28415b3b6055
-
SHA256
af3458ef8e519bdee190806faaa9efe9aa171a2b2aa36b585bf936bd0818452a
-
SHA512
630b09e1581986a18afd3605ed54c9f291183d7cc775202bd9d2efb6dfbdb753bfe9bf8af626ffc18748a586474e4d5b09a9299173c5d8e8c76fe7d173fcfda6
-
SSDEEP
1536:BkW5SW57ZAaP8lX31lchd1CpoO3grwf6lT9ZBjhOWx7egRfD1nW8pO+CVafy:KPWThP8lXlYyH3TClzBtbiShe+CP
Malware Config
Signatures
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 2340 AcroRd32.exe -
Suspicious use of SetWindowsHookEx 3 IoCs
pid Process 2340 AcroRd32.exe 2340 AcroRd32.exe 2340 AcroRd32.exe
Processes
-
C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe"C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AcroRd32.exe" "C:\Users\Admin\AppData\Local\Temp\e8679b63d4e3e327c49ed4b0ff43fb7f_JaffaCakes118.pdf"1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2340
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3KB
MD5d8aeb382676c5909b100842d2201fa5d
SHA123e50ad572f306d1fdf5732f86c7e603d3aca72a
SHA256515ff882c7d339f34ba34f48015de280d90041a60c99ca3fe3406f9c9b02dcaf
SHA5129b5192cc766064fe4c1f5474afaa53e715eae29b91b0d320e731ce95e0688fc5f37b4e32746552fd81e29055e9d2b12e8a8cf5fb0a969e25c50795f20da678fb